Kodem
Tel Aviv, IL · Founded 2021 · 4 known investors
Kodem provides AI security posture management (AI-SPM) that reconstructs the runtime hierarchy of AI agents, tools, MCP servers, models, and credentials running inside applications from runtime evidence. It attributes actions to specific agents and maps reachable risk to enable per-agent policy and enforcement through AI gateways.
Founders & leadership
Kodem was founded in 2021 by Aviv Mussinger, Pavel Furman, and Idan Bartura.







Board
Investors · 4
Also in the syndicate · 1
Company profile
researched Aug 2026Kodem Security was founded in 2021 in Israel by Aviv Mussinger (CEO), Pavel Furman (CTO), and Idan Bartura (Head of R&D/Engineering) — all three previously security researchers at NSO Group, the Israeli firm best known for the Pegasus spyware. Multiple sources, including Kodem's own press releases ('established by the masterminds behind Pegasus, the world's most sophisticated spyware') and TechCrunch's stealth-launch coverage, confirm this NSO/Pegasus lineage, while TechCrunch also notes the founders were 'not directly involved in the aspects of NSO and Pegasus that got weaponized.' The name 'Kodem' means 'first' or 'early' in Hebrew, reflecting the company's thesis around catching real risk early using runtime evidence rather than static, declaration-based scanning.
Kodem emerged from stealth on June 13, 2023, disclosing a combined $25M in funding: a $7M Seed round co-led by TPY Capital and Greylock, and an $18M Series A led by Greylock (TechCrunch, SiliconANGLE). Greylock partner Asheem Chandna gave the investor quote: 'Kodem has assembled an exceptional product team that is developing the next generation of application security — one that is cloud-native, deploys seamlessly, and provides the highest levels of accuracy with strong growing coverage.' Greylock's own portfolio page (greylock.com/portfolio/kodem-security) confirms Greylock 'first partnered' with Kodem at the Seed stage, lists the company's status as 'Active,' and names Asheem Chandna and Jason Risch as the Greylock investors involved — the clearest available first-party confirmation of the Greylock relationship, though it does not explicitly state a board seat.
At launch, Kodem's flagship product (referred to on Greylock's site as 'Kodem Dynamic') was described as an SCA (software composition analysis) platform using runtime intelligence — tracing which loaded libraries and functions actually execute in production — to cut false positives (the company has claimed 90–95% false-positive reduction versus traditional scanners). The platform subsequently expanded: in April/May 2024 Kodem announced a runtime-powered SAST (static analysis) capability plus IaC and container security, alongside a leadership expansion adding Dennis Vasavis as Head of Sales and Mahesh Babu as Head of Marketing (a PRNewswire/PRWeb release datelined San Francisco). Rapyd, a global fintech platform, is a named, on-the-record customer: Rapyd CISO Nir Rothenberg is quoted in that release and in a dedicated case study ('How Rapyd Used Kodem to Shift from Volume to Impact,' July 2025) describing measurable reductions in triage time and false positives. In June 2024 Kodem launched on the Google Cloud Marketplace, and it later joined the GKE Autopilot partner ecosystem (January 2026). Kodem won the 2024 Fortress Cybersecurity Award for Best Application Security Solution (Business Intelligence Group, May 2024) and the 2024 Top InfoSec Innovators Award in Application Security (Cyber Defense Magazine, November 2024).
Business model
B2B enterprise software (SaaS). Kodem sells a runtime-powered application security platform to security and development teams at mid-market and enterprise companies, typically via direct sales plus cloud marketplaces (e.g., Google Cloud Marketplace) and cloud/technology partnerships (e.g., Google Cloud, GKE Autopilot partner ecosystem).
Subscription/license-based SaaS platform (exact pricing/packaging not publicly disclosed; company markets tiered platform + add-on modules such as ADR and Secret Detection).
▸Full profile — profile (continued), go-to-market, ownership
Profile (continued)
At RSAC 2025, Kodem launched 'Kai,' billed as the first AI-native application security engineer; by July 2025 the company repositioned Kai as a multi-agent 'agentic task force' (Kai Red for proving exploitability, Kai Blue for remediation/verification, Kai Defend for real-time production defense), coordinated over a shared 'attack map' built from code, container, and runtime telemetry. The company's current site frames its offering as a 'Self-Healing Application' workflow (find → fix → verify, continuously) and highlights 'Runtime AI Security,' i.e., discovering and attributing the actions of AI agents/MCP tools running inside customer applications — a pivot reflecting the broader 2025–2026 market shift toward AI-agent security and reachability-based prioritization (echoed in Gartner's 2025 Hype Cycle for Application Security and FedRAMP's draft RFC-0012 guidance, both cited in Kodem's own materials).
As of the company's own 'About' page (accessed August 2026), Kodem reports 2021 as its founding year, 51 employees, and '$40M+ raised to date.' This self-reported total exceeds the $25M publicly confirmed via press coverage of the 2023 Seed/Series A rounds, and the same page's 'Backed by' section now also displays a Highland Capital Partners logo (linking to hcp.com) alongside Greylock and TPY Capital — whereas Kodem's own May 2024 press release described the company as 'Backed by TPY Capital and Greylock Partners' only, with no mention of Highland. This strongly suggests an additional (likely Series B or extension) financing involving Highland Capital Partners occurred sometime between mid-2024 and mid-2026, but no press release, TechCrunch/Crunchbase entry, or other independent news source confirming the amount, date, or full investor syndicate of this round could be located during this research; Crunchbase's public profile for Kodem still lists only two rounds (Seed and Series A) with Greylock and TPY Capital as the disclosed investors. This funding gap and the unconfirmed round should be treated as a flagged data-quality issue rather than a verified fact.
Kodem's homepage 'trusted by' logo carousel names Lightcast, Apollo, Dayforce, Google, CAVA, MLB (Major League Baseball), Stewart, Microsoft, Minute Media, Riskified, Rapyd, and Baptist Health as customers/users of the platform — self-reported by the company but a reasonably strong signal given the specificity of named brands (particularly Rapyd, which is independently corroborated via a named CISO quote in two separate pieces of content). Kodem positions itself against traditional SAST/SCA vendors, with dedicated 'alternatives/comparison' pages versus Snyk, GitHub Advanced Security, Checkmarx, Veracode, and Semgrep; Crunchbase separately lists Aikido Security, Sysdig, and Wiz as competitors. The current executive/leadership roster (per the company's team page, August 2026) includes Aviv Mussinger (CEO & Co-Founder), Pavel Furman (CTO & Co-Founder), Idan Bartura (Head of R&D & Co-Founder), Gal Segev (Chief of Staff), Oron Chertkow (Head of Operations), Mahesh Babu (Field CISO — previously Head of Marketing per the 2024 press release, indicating a role change), Jill Klein (Head of Sales — succeeding Dennis Vasavis, who is no longer listed on the team page), and Christine Carrig (Head of Demand Generation). No independent source (e.g., SEC filings, detailed board disclosures) was found to fully enumerate Kodem's board of directors beyond the Greylock investor listing; this should not be assumed to be the complete board.
Go-to-market
Enterprise application security, DevSecOps, and platform engineering teams, with named use in fintech, insurance, healthcare, retail, sports/media, and technology sectors.
Ownership
private
Compiled by commissioned research from 16 cited public sources — announcements, filings, and press listed under research sources below.
Key figures
latest reportedCompany-reported or press-reported figures, each dated to when it was claimed — not independently audited.
Customers & partners
Named customers · 12
Relationships the company or its partners disclosed publicly — case studies, joint announcements, press.
Timeline · 11
launches, deals, and filingsKodem launches a capability turning perimeter WAF security into full-spectrum application defense using runtime evidence.
Kodem becomes an approved Google Kubernetes Engine (GKE) Autopilot partner.
Kodem evolves Kai from a single agent into a multi-agent system (Kai Red, Kai Blue, Kai Defend) for end-to-end AppSec automation.
Kodem publishes a case study detailing how fintech Rapyd used the platform to reduce triage time and false positives.
Kodem introduces Kai, described as the first AI-native application security engineer.
Cyber Defense Magazine names Kodem a winner in its Top InfoSec Innovators Awards, Application Security category.
Kodem's platform becomes available on the Google Cloud Marketplace.
Kodem wins the Business Intelligence Group's 2024 Fortress Cybersecurity Award for Best Application Security Solution.
Kodem announces a runtime-powered SAST offering (extending SCA and container security) and adds Dennis Vasavis (Head of Sales) and Mahesh Babu (Head of Marketing) to its leadership team.
Company publicly launches, disclosing a $7M Seed round (co-led by TPY Capital and Greylock) and an $18M Series A led by Greylock.
Aviv Mussinger, Pavel Furman, and Idan Bartura, all former NSO Group security researchers, found Kodem in Israel (exact month/day not confirmed).
Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.
In the news
▸Research sources · 16
primary sources listed
- Kodem Security Joins the GKE Autopilot Partner EcosystemKodem Security · company site
- Kodem just built the world's only Dev to Prod Agentic Taskforce in CyberKodem Security · company site
- How Rapyd Used Kodem to Shift from Volume to ImpactKodem Security · company site
- Kodem named Winner of Top Infosec Innovators Award for Application SecurityKodem Security · company site
- Kodem Security Now on Google Cloud Marketplace!Kodem Security · company site
- PRESS RELEASE: Kodem Security Wins 2024 Fortress Cybersecurity Award for Best Application Security SolutionKodem Security · company site
- PRESS RELEASE: Kodem Security Announces Groundbreaking Advancements & Strategic Expansion of Leadership TeamKodem Security · company site
- Kodem | GreylockGreylock Partners · company site
- Intelligent Application Security Platform | KodemKodem Security · company site
- About Kodem | AI-Native Application SecurityKodem Security · company site
- Aviv Mussinger - Team | KodemKodem Security · company site
- Pavel Furman - Team | KodemKodem Security · company site
16 public sources were cited for this profile; the first-party ones are listed here.
Frequently asked questions
- What does Kodem do?
- Secure what actually runs, from code to AI agents.
- Who founded Kodem?
- Kodem was founded by Aviv Mussinger, Pavel Furman, Idan Bartura in 2021.
- Who are Kodem's investors?
- Kodem's investors include Greylock Partners, Highland Capital Partners, TPY Capital.
- Where is Kodem headquartered?
- Kodem is headquartered in Tel Aviv, IL.
